Websoft HCM Automation Software Unauthorized Access

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of protection for operational data. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information through specially crafted requests...

PT-2022-5574

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to errors in filtering user code in the XML tag handler of the Websoft HCM software, which can be exploited by a remote attacker to execute arbitrary code...

PT-2022-7243

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to the lack of measures to neutralize instructions in dynamically executed code in Websoft HCM, a software for automating HR processes. This could allow a remote...

PT-2022-7244

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to errors in file name or path management. It allows a remote attacker to gain read access to the file system. Recommendations At the moment, there is no information...

PT-2022-7245

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to the lack of protection for the web page structure in Websoft HCM, allowing a remote attacker to perform cross-site scripting XSS attacks. Recommendations At the...

PT-2022-5581

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue exists due to inadequate protection of the web page structure in Websoft HCM, allowing a remote attacker to conduct a cross-site scripting XSS attack. Recommendations At the...

PT-2022-5580

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to an incorrect session timeout in the Websoft HCM software, which can be exploited by a remote attacker to reuse session credentials and access user information...

PT-2022-5584

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to a URL redirection vulnerability in the Websoft HCM software, which can allow a remote attacker to redirect users to an arbitrary URL. Recommendations At the moment...

PT-2022-5587

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue exists due to inadequate protection of the web page structure in Websoft HCM, allowing a remote attacker to conduct a cross-site scripting XSS attack. Recommendations At the...

PT-2022-5593

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to incorrect code generation management in the Websoft HCM software. It allows a remote attacker to execute arbitrary code when forming an HTTP request. Recommendatio...

PT-2022-5588

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue exists due to inadequate protection of the web page structure in Websoft HCM, allowing a remote attacker to conduct a cross-site scripting XSS attack. Recommendations At the...

PT-2022-5586

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to an unlimited upload of dangerous file types in the Websoft HCM software, which can be exploited by a remote attacker to execute arbitrary code. Recommendations At...

PT-2022-5591

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to a lack of protection for service data in the Websoft HCM software, which can be exploited by a remote attacker to gain unauthorized access to protected information...

PT-2022-5589

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to a lack of protection for internal data in the Websoft HCM software, which can be exploited by a remote attacker. By sending an incorrect value in a parameter, an...

PT-2022-5585

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to an uncontrolled resource consumption in the Websoft HCM software, which can be exploited by a remote attacker to cause a denial of service. Recommendations At the...

PT-2022-5592

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to incorrect code generation management in the Websoft HCM software. It allows a remote attacker to execute arbitrary code when forming an HTTP request. Recommendatio...

PT-2022-5575

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to weaknesses in the error reporting mechanism of the software. It allows a remote attacker to exploit the vulnerability by passing an incorrect value in a parameter,...

PT-2022-5578

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to weaknesses in the authorization procedure of the Websoft HCM software, which can be exploited by a remote attacker to gain unauthorized access to protected...

PT-2022-5577

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the Websoft HCM software, allowing a remote attacker to conduct a cross-site scripting XSS attack. Recommendatio...

PT-2022-5582

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to errors in the session identifier generation mechanism. It may allow a remote attacker to elevate their privileges. Recommendations At the moment, there is no...